CVE-2020-9729

A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@adobe.com

Published

2020-09-10

Last modified

2024-09-17

Weaknesses

CWE-787, CWE-788

Affected products

• Indesign (Adobe)

References

• https://helpx.adobe.com/security/products/indesign/apsb20-52.html